x86/p2m: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 29 Oct 2021 14:47:59 +0000 (15:47 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit84667b15cdb7d7039f179e9160950a944f9b41e0
tree9325a45f322b22874e9b976c2f38cce5e2e46ae6
parentb0331a678e07eb5cd9da4b1b1e784e1f37b91a23
x86/p2m: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/include/asm/p2m.h
xen/arch/x86/mm/hap/hap.c
xen/arch/x86/mm/hap/nested_hap.c
xen/arch/x86/mm/p2m-ept.c
xen/arch/x86/mm/p2m-pt.c